Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20313734.roa
File:                     3231362e3135312e3136332e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          jk149+UAkaRcdISy+1ONEqiSBSDg9Fi+yuas7ewOQk0=
Subject key identifier:   E6:F5:71:FD:5E:51:0F:23:30:2C:9A:99:16:8C:AD:00:8A:E9:2F:9D
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       1ACE5FA7EBEAA00FC5AFEA374FE08EB805B5711B
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20313734.roa
Signing time:             Wed 31 Jul 2024 14:36:39 +0000
ROA not before:           Wed 31 Jul 2024 14:31:39 +0000
ROA not after:            Wed 30 Jul 2025 14:36:39 +0000
asID:                     174
IP address blocks:        216.151.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 22:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ce:5f:a7:eb:ea:a0:0f:c5:af:ea:37:4f:e0:8e:b8:05:b5:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jul 31 14:31:39 2024 GMT
            Not After : Jul 30 14:36:39 2025 GMT
        Subject: CN=E6F571FD5E510F23302C9A99168CAD008AE92F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:ca:f6:5b:e9:8d:1e:9b:26:61:c2:51:fd:
                    f1:39:6f:08:aa:93:59:7a:9e:6f:7a:11:72:08:8f:
                    2f:41:88:f9:6d:5a:75:6b:89:b2:d6:9b:10:69:d9:
                    6e:07:39:f1:13:d0:d1:c5:34:17:f4:fb:62:07:df:
                    21:cd:07:f8:3c:83:62:8e:16:2d:82:4e:42:64:95:
                    89:b2:dd:35:67:93:5a:42:b9:ea:29:75:51:43:da:
                    e5:86:47:12:41:72:92:44:2a:35:6a:59:47:79:bf:
                    fb:36:79:95:8c:f0:58:fc:af:f0:d1:4f:ae:6e:1d:
                    3a:9a:06:0b:b8:a2:68:ac:a0:56:f5:9e:7a:f1:e7:
                    06:68:b8:0f:d2:31:9b:54:e2:7a:b5:21:cc:18:a9:
                    da:c2:6f:a0:f5:a9:f6:29:88:3d:9b:cd:13:fe:5c:
                    eb:55:7f:46:df:c8:01:ed:87:ab:83:36:e0:94:0d:
                    15:8c:28:22:2d:66:92:f9:f7:97:9a:7d:9c:f4:cf:
                    ab:2b:9f:aa:ff:99:cc:02:d5:d7:92:d4:ec:95:4e:
                    f3:ad:da:25:d3:03:61:d4:b2:b0:76:d3:79:1d:b8:
                    aa:42:58:fa:a3:2c:45:de:8f:39:2b:56:4c:fa:ac:
                    f1:db:7d:e0:6f:a0:de:2c:37:89:32:a6:cd:3b:5a:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:71:FD:5E:51:0F:23:30:2C:9A:99:16:8C:AD:00:8A:E9:2F:9D
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:9e:ef:21:30:54:96:30:6e:c2:be:38:85:34:71:93:a2:f3:
         09:66:c2:67:21:4e:41:87:43:ef:fd:32:13:af:17:2e:48:66:
         ac:22:aa:21:ab:c2:c3:fc:85:e6:d0:9c:5e:d6:8d:ad:34:a9:
         a3:39:50:ca:0d:80:68:f8:32:4a:f9:df:02:68:10:de:09:fd:
         a4:5b:55:7b:07:86:2c:e1:78:99:33:db:30:65:e4:3b:b7:d7:
         05:88:11:7d:d8:b7:6e:59:ea:bc:8d:48:11:56:7b:07:72:22:
         f5:c9:ee:95:10:24:37:2b:a3:cc:7f:50:7a:fc:c3:bb:2f:33:
         2b:d2:0f:6b:5b:d6:89:d5:b7:67:c7:0c:31:31:40:bc:6e:dd:
         ea:1a:4c:ae:ff:7c:4d:7d:c7:dd:d1:e1:cf:fb:91:2c:70:f6:
         9e:4e:01:99:a3:2c:b8:1f:c9:b4:27:c6:e5:2c:00:2a:51:f0:
         5f:4a:cb:8c:5a:25:8a:a6:7b:61:f2:5a:26:5e:53:36:22:3f:
         03:9d:89:0b:fb:92:a3:f9:eb:0d:be:f8:36:a8:2b:ce:53:a3:
         01:61:20:a7:97:0f:4f:3f:94:30:51:22:03:ed:fa:9d:d5:b7:
         5c:0f:99:9a:de:15:0f:96:fe:6c:36:68:ee:08:6b:1b:4e:4f:
         c2:47:67:f0
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUGs5fp+vqoA/Fr+o3T+COuAW1cRswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjQwNzMxMTQzMTM5WhcNMjUwNzMwMTQzNjM5
WjAzMTEwLwYDVQQDEyhFNkY1NzFGRDVFNTEwRjIzMzAyQzlBOTkxNjhDQUQwMDhB
RTkyRjlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9vK9lvpjR6b
JmHCUf3xOW8IqpNZep5vehFyCI8vQYj5bVp1a4my1psQadluBznxE9DRxTQX9Pti
B98hzQf4PINijhYtgk5CZJWJst01Z5NaQrnqKXVRQ9rlhkcSQXKSRCo1allHeb/7
NnmVjPBY/K/w0U+ubh06mgYLuKJorKBW9Z568ecGaLgP0jGbVOJ6tSHMGKnawm+g
9an2KYg9m80T/lzrVX9G38gB7YergzbglA0VjCgiLWaS+feXmn2c9M+rK5+q/5nM
AtXXktTslU7zrdol0wNh1LKwdtN5HbiqQlj6oyxF3o85K1ZM+qzx233gb6DeLDeJ
MqbNO1rBkQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOb1cf1eUQ8jMCyamRaMrQCK
6S+dMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYl6MwDQYJKoZIhvcNAQELBQAD
ggEBAGue7yEwVJYwbsK+OIU0cZOi8wlmwmchTkGHQ+/9MhOvFy5IZqwiqiGrwsP8
hebQnF7Wja00qaM5UMoNgGj4Mkr53wJoEN4J/aRbVXsHhizheJkz2zBl5Du31wWI
EX3Yt25Z6ryNSBFWewdyIvXJ7pUQJDcro8x/UHr8w7svMyvSD2tb1onVt2fHDDEx
QLxu3eoaTK7/fE19x93R4c/7kSxw9p5OAZmjLLgfybQnxuUsACpR8F9Ky4xaJYqm
e2HyWiZeUzYiPwOdiQv7kqP56w2++DaoK85TowFhIKeXD08/lDBRIgPt+p3Vt1wP
mZreFQ+W/mw2aO4IaxtOT8JHZ/A=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:12:40 2024 by rpki-client on console-fra.rpki-client.org